DOCS-15370 documents cluster-related audit event (#2021)

* DOCS-15370 documents cluster-related audit event

* DOCS-15370 documents new startup audit event details

* internal review feedback

* release notes linking improvement

Author: jmd-mongo

source/includes/fact-audit-message-setClusterParameter-form.rst

@@ -0,0 +1,7 @@
+.. code-block:: none
+   :copyable: false
+
+   { 
+       originalClusterServerParameter: <original parameter value>,
+       updatedClusterServerParameter": <new parameter value> 
+   }

source/reference/audit-message.txt

@@ -505,6 +505,36 @@ associated ``param`` details and the ``result`` values, if any.
 
      - ``0`` - Success
 
+   * - .. _audit-message-getClusterParameter:
+
+       ``getClusterParameter``
+     - .. code-block:: none
+          :copyable: false
+
+          { 
+              requestedClusterServerParameters: <parameters> 
+          }
+     - ``0`` - Success 
+
+   * - .. _audit-message-setClusterParameter: 
+
+       ``setClusterParameter``
+     - .. include:: /includes/fact-audit-message-setClusterParameter-form.rst 
+     - ``0`` - Success 
+
+   * - .. _audit-message-updateCachedClusterServerParameter:
+
+       ``updateCachedClusterServerParameter``
+     - .. include:: /includes/fact-audit-message-setClusterParameter-form.rst 
+ 
+       Logged when a parameter is changed because of:
+
+       - Propagation of a ``setClusterParameter`` command
+       - Replication event such as rollback
+       - A refresh of new cluster parameter values from the config 
+         server on ``mongos``
+     - ``0`` - Success 
+
    * - ``updateUser``
 
      - .. code-block:: none
@@ -896,16 +926,24 @@ associated ``param`` details and the ``result`` values, if any.
    * - .. _audit-message-startup:
 
        ``startup``
-
      - .. code-block:: none
           :copyable: false
 
-          { options: <document> }
+          { 
+              startupOptions: <document>, 
+              initialClusterServerParameter: <array of documents> 
+          }
+
+       - ``startupOptions`` contains all of the options that the node 
+         has after startup 
+       - ``initialClusterServerParameters`` contains the initial values
+         of the cluster server parameters that the node has at the end 
+         of startup:
 
-       The ``options`` document contains the options the instance was 
-       started with.
+         - after they have been loaded from storage (for ``mongod``) 
+         - after they have been refreshed from the config server 
+           (for ``mongos``).
 
        .. versionadded:: 5.0
-
-
+       .. versionchanged:: 6.1
      - ``0`` - Success

source/release-notes/6.1.txt

@@ -361,6 +361,24 @@ Starting in MongoDB 6.1, the aggregation stages :pipeline:`$addFields` and
 :pipeline:`$set` allow you to set paths to empty objects without using the 
 :expression:`$literal` expression.
 
+
+Auditing
+~~~~~~~~
+
+MongoDB 6.1 adds the following cluster audit events:
+
+- :ref:`getClusterParameter <audit-message-getClusterParameter>`
+- :ref:`setClusterParameter <audit-message-setClusterParameter>`
+- :ref:`updateCachedClusterServerParameter 
+  <audit-message-updateCachedClusterServerParameter>`
+
+Starting in MongoDB 6.1, the :ref:`startup <audit-message-startup>` 
+audit event has this structure:
+
+.. include:: /includes/fact-audit-message-setClusterParameter-form.rst 
+
+For additional details, see :ref:`audit-action-details-results`.  
+
 Server Parameters
 -----------------